Skip to content
OpenAdvisories
High RHSA-2025:4043 2 CVEs

Red Hat Security Advisory: bluez security update

Published Apr 24, 2025 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-cups 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-cups-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-debugsource 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-hid2hci-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-libs-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream bluez-obexd-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-cups-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-debugsource 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-hid2hci 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-hid2hci-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-libs 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-libs-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-obexd 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::baseos bluez-obexd-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-cups-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-debugsource 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-hid2hci-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-libs-debuginfo 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-libs-devel 0:5.63-5.el8_10
Red Hat · RHEL 8 enterprise_linux:8::crb bluez-obexd-debuginfo 0:5.63-5.el8_10

Vulnerabilities 2

  • High 7.1
    CVE-2023-27349

    BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability

    BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to …

    BlueZ BlueZ bluez bluez Debian Ubuntu
  • Medium 5.4
    CVE-2023-51589

    BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability

    BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is…

    BlueZ BlueZ bluez bluez Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278787
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278965
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4043.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-27349
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-27349
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-27349
  • article
    https://www.zerodayinitiative.com/advisories/ZDI-23-386/
  • report
    https://access.redhat.com/security/cve/CVE-2023-51589
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-51589
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-51589